Lesson 11

Question 1

How does FileVault 2 protect a user’s data?

Answer 1

FileVault 2 protects the entire system volume and all its data by using strong XTS- AES 128 encryption. During system startup, a FileVault-enabled user must enter her password to decrypt the system volume.

Question 2

What are the system requirements for using FileVault 2?

Answer 2

To enable FileVault 2, OS X systems must have the hidden OS X Recovery HD volume on the system disk. Further, any Legacy FileVault accounts must be decrypted and returned to normal accounts before FileVault 2 can be enabled.

Question 3

Which users are allowed to unlock a FileVault 2 protected system?

Answer 3

Any user that’s FileVault enabled is allowed to unlock a FileVault 2–protected system. This includes any local or cached network user account that was enabled when FileVault 2 was set up or created after FileVault 2 was enabled. Further, administrators may return to Security & Privacy preferences to enable additional accounts.

Question 4

How can you unlock a FileVault 2–protected system when all user accounts have lost their passwords?

Answer 4

A FileVault 2–protected system can be unlocked using the recovery key that was generated during the FileVault 2 setup process. This key can be entered during system startup, and will allow you to reset the user’s account password.